Group profile

The group profile (GRPPRF) parameter specifies if the user is a member of a group profile. The group profile can provide the user with authority to use objects for which the user does not have specific authority. You may specify up to 15 additional groups for the user in the Supplemental group profile (SUPGRPPRF) parameter.

Add User prompt:: User Group
CL parameter:: GRPPRF
Length:: 10
Authority:: To specify a group when creating or changing a user profile, you must have *OBJMGT, *OBJOPR, *READ, *ADD, *UPD, and *DLT authority to the group profile.
Note:: Adopted authority is not used to check for *OBJMGT authority to the group profile. For more information about adopted authority, see Objects that adopt the owner's authority.

When a group profile is specified in a user profile, the user is automatically granted *OBJMGT, *OBJOPR, *READ, *ADD, *UPD, and *DLT authorities to the group profile, if the group profile is not already one of the user's group profiles. These authorities are necessary for system functions and should not be removed.

If a profile specified in the GRPPRF parameter is not already a group profile, the system sets information in the profile marking it as a group profile. The system also generates a gid for the group profile, if it does not already have one.

When the GRPPRF value is changed, the change takes effect the next time the user signs on or the next time a job swaps to the user profile using a profile handle or profile token, which was obtained after the change occurred.

See Planning group profiles for more information about using group profiles.

Table 1. Possible values for GRPPRF
*NONE	No group profile is used with this user profile.
user-profile-name	Specify the name of a group profile of which this user profile is a member.